CVE-2007-3375 Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropp...
MediumCVSS 6.8
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lhaca file archiver | <= 1.20 | No fix listed |
References
- 25826 third-party-advisory vendor-advisory
- vuln.sg
- VU#871497 third-party-advisory us-government-resource
- 24604 vdb-entry
- www.symantec.com
- www.symantec.com
- lhaca-lzh-bo(35116) vdb-entry